Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
File: SOmaP-7GTWutCY0bLfC1NqA4jqM.mft (raw, json)
Hash identifier: Ia6F2a0pr5fVga73jNCuUR8O6Of2pfiL6NSSYFyeoeE=
Subject key identifier: 89:84:1E:D4:30:2C:29:76:DF:E4:E4:73:C7:80:CA:1F:F2:71:59:E4
Authority key identifier: 48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3
Certificate issuer: /CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
Certificate serial: 0199FCC635B4A60B0D9699B1E805C136B043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 14:01:12 +0000
Manifest this update: Sun 19 Oct 2025 14:01:12 +0000
Manifest next update: Mon 20 Oct 2025 14:01:12 +0000
Files and hashes: 1: JqTAJDe2OYCUvbJc8miiDJhn9ck.roa (hash: XOVcEkw4qLtgeZZ1W3TII3S4x02laIR1b6T9nld7824=)
2: SOmaP-7GTWutCY0bLfC1NqA4jqM.crl (hash: LOdtgxKeXbhdac2D2GZS+NCu70dtWPKt9pL7qlqdrrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:35:b4:a6:0b:0d:96:99:b1:e8:05:c1:36:b0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
Validity
Not Before: Oct 19 14:01:12 2025 GMT
Not After : Oct 20 14:01:12 2025 GMT
Subject: CN=89841ed4302c2976dfe4e473c780ca1ff27159e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:18:47:e9:8b:dc:15:0c:0c:34:67:c1:43:
1d:3f:23:1c:de:32:36:f2:09:30:5a:28:66:17:4e:
00:57:ce:b9:80:1c:a1:10:3f:a6:ea:79:e6:fe:3a:
f2:11:2b:da:df:67:c0:3e:21:f1:00:9a:03:94:bc:
59:c2:73:40:b9:46:d0:c1:ec:31:a4:27:a0:5a:f4:
78:63:89:75:16:d0:7c:48:44:16:b6:00:41:c0:6f:
0d:7d:a7:ce:ca:c5:52:8a:f1:dc:02:9b:df:ed:f4:
75:41:82:77:1b:34:21:ad:cd:5b:da:9d:ec:c9:e7:
26:a4:ca:58:e1:bb:5a:7e:54:39:a0:99:1c:f8:c7:
a4:bd:43:12:da:eb:cb:2b:44:05:70:de:7b:e9:47:
a5:56:82:ba:95:2a:d9:d3:58:d0:e9:02:cd:3e:3b:
bb:21:18:16:38:ed:d2:61:ae:be:e6:1c:62:62:98:
f2:68:ed:23:29:e5:11:26:a5:61:e6:e0:07:5d:3c:
e1:d6:24:0a:17:6e:f6:2c:28:4b:65:a4:c9:e7:c5:
e6:33:15:67:dc:6b:1b:12:f0:fc:f4:2b:46:60:54:
fe:e1:92:61:8f:44:e9:1a:06:63:ce:86:b3:72:00:
6e:d8:59:ed:0e:69:5e:df:83:b9:ed:be:7d:10:40:
02:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:84:1E:D4:30:2C:29:76:DF:E4:E4:73:C7:80:CA:1F:F2:71:59:E4
X509v3 Authority Key Identifier:
keyid:48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3c:5b:f2:7d:3f:4b:e6:86:d3:75:c5:13:d6:f6:fb:61:60:
c6:50:3a:90:d0:b5:4e:92:44:b9:b9:db:6e:6d:0e:d0:84:df:
57:48:11:65:3e:3b:c9:23:a4:98:61:99:f5:9b:b2:3b:04:58:
a3:e3:f5:e9:d4:a8:fa:61:89:28:d8:51:de:3d:81:5c:55:a8:
5d:f5:8f:78:ff:91:aa:48:e0:07:56:22:30:c9:07:9b:f3:e2:
a2:92:89:cc:cc:52:b0:d1:de:8f:75:f3:d7:8e:3d:3a:78:64:
6a:e4:cf:63:e8:4c:9e:7b:e1:8b:c4:a3:c6:ef:6b:61:e7:c7:
0d:ad:8d:6a:62:59:2c:76:c0:99:9d:54:e4:f7:c6:4f:5c:8d:
1d:b5:db:22:b7:85:a1:59:ce:5e:26:30:58:b0:d4:d9:59:e3:
84:f6:11:3b:3f:61:6e:6d:c8:02:e1:fe:4d:1d:d0:4d:56:b9:
5d:a6:c5:d1:98:38:c0:10:b8:60:64:cc:8a:06:95:4f:8c:ac:
98:cf:2f:39:bf:94:7b:23:88:40:b7:35:d0:8c:e4:19:f1:10:
f5:32:b8:ed:3b:98:74:87:2d:13:90:40:63:f3:fd:fd:ae:41:
5a:1e:39:d9:4f:6c:b7:5d:fd:e6:ae:45:b0:cc:8b:3b:bb:eb:
1b:47:f4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:23 2025 by rpki-client